$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa File: E12FA43A1F3111EBA626C57BC4F9AE02.roa (raw, json) Hash identifier: 9FVK4gVC84+8ijUrop2HbuwNLIrkoCcDTDnNecejNGs= Subject key identifier: 45:5B:98:32:67:40:36:F6:23:E1:20:88:67:0F:27:DB:CD:BD:46:FF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8C22 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa Signing time: Thu 30 May 2024 16:10:01 +0000 ROA not before: Thu 30 May 2024 16:10:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138316 IP address blocks: 103.132.152.0/24 maxlen: 24 103.141.247.0/24 maxlen: 24 2406:b1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35874 (0x8c22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:10:01 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a4d9-9101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:8a:2c:ed:1e:4c:ae:6f:3e:4e:c5:dd:e9: 69:e2:aa:44:63:b7:51:f2:de:cf:a3:42:a9:8d:d5: 98:57:2f:46:f4:91:94:6e:14:a7:22:01:ac:66:e0: 87:7f:ed:45:35:7b:34:7c:27:77:cf:1a:7f:62:d3: fe:1c:45:79:20:e5:d5:63:2e:b5:55:30:af:36:e4: db:49:10:70:5f:4a:bc:09:d7:87:32:14:5b:33:67: f7:6e:98:22:72:6a:d0:07:85:9e:aa:a6:b0:a8:74: 69:e2:15:58:ff:69:77:e8:ac:68:83:36:d3:bf:3b: f5:80:a4:de:83:1d:0a:3d:05:43:ea:e8:53:c2:ea: c7:b1:f4:d0:d0:69:8c:ee:9c:9f:33:56:71:fc:15: 02:4e:5d:28:91:95:70:71:15:e4:17:c5:b9:b2:f1: ee:fb:2f:36:a3:49:2f:8c:d3:80:ed:dc:07:0e:80: b4:4d:6a:a8:32:13:93:8b:22:39:6f:85:81:c6:39: 4e:9f:7b:e1:96:56:fc:c3:00:81:d0:a0:de:08:8c: c9:4a:71:91:d2:e2:8a:38:61:18:fd:19:25:42:13: b2:1d:51:48:b0:49:7d:73:d6:bf:32:83:c8:f1:cd: 75:05:29:57:d7:71:10:ff:4b:a4:5b:97:88:85:58: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5B:98:32:67:40:36:F6:23:E1:20:88:67:0F:27:DB:CD:BD:46:FF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E12FA43A1F3111EBA626C57BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.152.0/24 103.141.247.0/24 IPv6: 2406:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption a7:c7:56:79:7b:6a:f8:ab:e8:e2:09:b7:86:d2:b1:92:34:05: 69:ec:f1:86:38:81:09:4e:00:43:03:5e:51:80:89:6b:c4:7b: 4b:62:f4:a1:65:10:2d:c9:d4:dc:86:7d:72:6d:68:54:bb:d0: e6:40:81:1c:25:0d:29:f0:db:78:38:bc:8f:03:3e:44:3e:f7: 61:55:6a:83:0f:e7:99:b4:ad:b6:7d:3e:94:c5:83:59:64:7f: f9:c6:03:4d:c2:98:a5:dc:e7:b6:e2:cf:6d:db:a3:05:08:10: c8:2f:5f:a6:fd:7d:47:b8:79:44:c6:70:33:56:09:17:17:e4: d3:a0:54:67:5b:8e:a5:69:bc:16:f7:d9:12:bb:c4:73:c0:0c: bc:d3:a0:62:37:a7:46:7d:8a:14:2a:7c:b5:d2:92:8b:80:fd: 32:50:d7:a3:62:31:17:89:34:14:af:73:9c:ce:f1:d8:fe:56: 39:4d:c1:e8:8c:0c:e9:b4:9e:d0:b4:d6:40:44:df:c2:14:1f: 1b:97:7e:26:0b:f0:4d:2a:9d:f8:69:bc:ca:4b:00:c8:3a:1d: ff:25:34:ce:15:22:d8:27:7a:93:6c:8b:e0:42:d3:af:2f:89: d6:3e:49:0a:21:31:51:46:6c:d0:a6:4b:9c:87:d7:ff:ea:18: 9d:8d:fd:af -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDAIwiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MTAwMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE0ZDktOTEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUKiiztHkyubz5Oxd3paeKqRGO3UfLez6NCqY3VmFcvRvSRlG4UpyIBrGbg h3/tRTV7NHwnd88af2LT/hxFeSDl1WMutVUwrzbk20kQcF9KvAnXhzIUWzNn926Y InJq0AeFnqqmsKh0aeIVWP9pd+isaIM207879YCk3oMdCj0FQ+roU8Lqx7H00NBp jO6cnzNWcfwVAk5dKJGVcHEV5BfFubLx7vsvNqNJL4zTgO3cBw6AtE1qqDITk4si OW+FgcY5Tp974ZZW/MMAgdCg3giMyUpxkdLiijhhGP0ZJUITsh1RSLBJfXPWvzKD yPHNdQUpV9dxEP9LpFuXiIVYKH0CAwEAAaOCAqowggKmMB0GA1UdDgQWBBRFW5gy Z0A29iPhIIhnDyfbzb1G/zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UxMkZBNDNB MUYzMTExRUJBNjI2QzU3QkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDQGCCsGAQUFBwEHAQH/ BCUwIzASBAIAATAMAwQAZ4SYAwQAZ433MA0EAgACMAcDBQAkBrHAMA0GCSqGSIb3 DQEBCwUAA4IBAQCnx1Z5e2r4q+jiCbeG0rGSNAVp7PGGOIEJTgBDA15RgIlrxHtL YvShZRAtydTchn1ybWhUu9DmQIEcJQ0p8Nt4OLyPAz5EPvdhVWqDD+eZtK22fT6U xYNZZH/5xgNNwpil3Oe24s9t26MFCBDIL1+m/X1HuHlExnAzVgkXF+TToFRnW46l abwW99kSu8RzwAy806BiN6dGfYoUKny10pKLgP0yUNejYjEXiTQUr3OczvHY/lY5 TcHojAzptJ7QtNZARN/CFB8bl34mC/BNKp34abzKSwDIOh3/JTTOFSLYJ3qTbIvg QtOvL4nWPkkKITFRRmzQpkuch9f/6hidjf2v -----END CERTIFICATE-----Generated at Mon Nov 25 13:05:10 2024 by rpki-client on console-fra.rpki-client.org